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Abstract 

A method and system for securely voting over a network, such as a global 
computer network, involves a system which delivers an electronic ballot from a server 
with the server's private key and a vote serial number on the ballot to an individual 
5 terminal connected to the network. The ballot may be filled in and a subset of the filled- 
in ballot is created with a digital signature created from the individual's secret key on the 
subset of the ballot corresponding to the ballot choices. The subset of the filled-in ballot 
together with the individual's electronic signature, and a vote serial number is then 
delivered to the server. A data element is then created to record a subset of the ballot in a 
10 data store at the server, in which the ballot vote information is retained as a vote. 
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